Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2b867cd2b5...0a.exe

windows7-x64

10

2b867cd2b5...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b867cd2b513dfc337407eae75c3ff46c5d7ab221b841f2e4cf2fa788715a30a

  • Size

    172KB

  • Sample

    221030-v8yezscbe5

  • MD5

    8249adc0d680875a349f1eb51bfc9cf7

  • SHA1

    900777ef9a6f0a9c6d01514d103f1873157e83ab

  • SHA256

    2b867cd2b513dfc337407eae75c3ff46c5d7ab221b841f2e4cf2fa788715a30a

  • SHA512

    0fd9a1afc30dd4883f26e5dc4d66dfd9807773ecd738a2175ae4183b5fe21ac94f2a5beb7d410b94b8f3ca7f8be634f932681f19f39d46387e747ad42e5c5baf

  • SSDEEP

    3072:eyAblB5QqiwcCA0laletdpVinzswyAQjh/gSF3Ef3ykQozVVC4:UIqtc30l+2yzswyAQjh/gSF3Ef3ykQod

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2b867cd2b513dfc337407eae75c3ff46c5d7ab221b841f2e4cf2fa788715a30a

    • Size

      172KB

    • MD5

      8249adc0d680875a349f1eb51bfc9cf7

    • SHA1

      900777ef9a6f0a9c6d01514d103f1873157e83ab

    • SHA256

      2b867cd2b513dfc337407eae75c3ff46c5d7ab221b841f2e4cf2fa788715a30a

    • SHA512

      0fd9a1afc30dd4883f26e5dc4d66dfd9807773ecd738a2175ae4183b5fe21ac94f2a5beb7d410b94b8f3ca7f8be634f932681f19f39d46387e747ad42e5c5baf

    • SSDEEP

      3072:eyAblB5QqiwcCA0laletdpVinzswyAQjh/gSF3Ef3ykQozVVC4:UIqtc30l+2yzswyAQjh/gSF3Ef3ykQod

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks